$ rpki-client -vvf rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft File: g_-qp9mkdZKx1MWD3-v67qJxY-8.mft (raw, json) Hash identifier: elfEtk4kmcVODRqS39eTd+iHT5mSNT/ZxVEg5b3Ske0= Subject key identifier: D8:0D:0A:8C:5C:1F:64:F5:9F:F3:2B:9E:E1:E4:53:C1:23:FB:EE:26 Authority key identifier: 83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF Certificate issuer: /CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Certificate serial: 0D7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft Manifest number: 0D79 Signing time: Mon 22 Apr 2024 18:42:39 +0000 Manifest this update: Mon 22 Apr 2024 18:42:39 +0000 Manifest next update: Mon 29 Apr 2024 18:42:39 +0000 Files and hashes: 1: g_-qp9mkdZKx1MWD3-v67qJxY-8.crl (hash: mb6vRH6hFtxRUXLs/HcTS2pHZU0M2m5jbUqMrrMiyRo=) 2: 54E64EE89EAE11E9AF631F7DC4F9AE02.roa (hash: iPisWQqnSiuuGZTAqlGXpvKcwAx/lgWs5/Zs3Ile8Go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 18:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3454 (0xd7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162557/serialNumber=83FFAAA7D9A47592B1D4C583DFEBFAEEA27163EF Validity Not Before: Apr 22 18:42:39 2024 GMT Not After : Apr 29 18:42:39 2024 GMT Subject: CN=6626af9f-9d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ff:25:8b:a1:37:31:d1:6b:44:63:91:32:7f: 07:43:af:99:e3:e4:e3:f5:a3:b1:16:07:38:7d:e7: af:11:e2:63:bf:39:74:31:bf:ca:df:96:09:cb:e0: 32:35:be:23:cd:42:1d:9b:e5:57:26:06:d8:9d:a9: d2:40:70:5f:78:b7:17:be:88:41:3b:9c:5e:33:87: c3:c6:89:90:d8:bd:dc:73:53:35:9f:0d:86:5a:07: 84:16:e5:25:5e:ce:33:55:60:44:2f:c9:fc:3f:21: 42:92:9e:98:e3:a9:bb:e9:3e:89:56:b7:0d:80:9f: 83:af:fc:18:b4:e2:7b:bb:1c:be:ae:51:09:93:37: dc:5a:45:03:71:91:0a:40:1f:48:b8:67:04:e8:41: 40:73:82:9f:3b:20:c0:00:e2:4e:4d:6b:77:e8:f3: 41:a5:30:53:d8:cb:a7:61:6f:0a:fa:02:14:85:49: 0b:e7:a5:94:da:35:a7:83:99:d8:06:a3:ab:9e:55: a8:b0:24:fc:fc:5f:3f:05:44:14:a5:ce:ca:7d:04: f4:4d:6b:ee:63:42:fb:9a:c7:dc:bc:5d:af:73:d2: 0a:00:1e:d0:c6:b1:36:82:b6:8e:f4:93:2f:0e:9b: 38:a6:66:be:9b:8a:88:82:09:ae:21:a0:c3:1c:b8: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0D:0A:8C:5C:1F:64:F5:9F:F3:2B:9E:E1:E4:53:C1:23:FB:EE:26 X509v3 Authority Key Identifier: keyid:83:FF:AA:A7:D9:A4:75:92:B1:D4:C5:83:DF:EB:FA:EE:A2:71:63:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_-qp9mkdZKx1MWD3-v67qJxY-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162557/B659EB189EAD11E9ABFC257CC4F9AE02/g_-qp9mkdZKx1MWD3-v67qJxY-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ea:c3:c7:36:f8:99:31:49:50:a7:98:28:b5:23:86:e7:ae: 6e:3d:2d:d7:03:e2:72:29:8d:8c:6b:55:bf:ef:57:56:b0:5b: 78:22:f4:3d:7e:41:12:4d:6e:76:eb:15:b0:ba:1b:f9:da:d4: 65:36:9d:62:f2:9e:23:c9:bb:1e:2f:a0:e3:ba:54:cf:26:80: d1:f8:ec:0b:54:80:1e:0e:6b:26:6e:a9:41:5c:fe:1f:d4:2a: e4:1a:11:b9:eb:97:48:aa:a4:ef:c4:b3:30:a0:d6:e2:7e:76: ad:3a:c1:dc:22:37:61:b1:2f:2a:64:3e:ed:6c:eb:fa:3b:11: 6f:3c:5a:74:ba:6a:08:55:04:02:0a:aa:0a:3b:5c:27:ba:a4: 67:0f:b8:2b:4f:89:cc:b3:2c:cf:bf:60:d9:e2:3d:7b:22:8f: 69:fb:42:c4:24:a2:0f:97:ee:e7:a0:19:d7:da:43:a1:d4:cd: dc:c5:e7:6b:9a:d7:c3:00:10:e1:f0:c6:0d:ef:f1:0d:f7:e0: da:d9:b7:b3:77:d9:c4:a3:8e:4a:a9:a3:86:60:c4:20:d5:3d: a8:95:71:97:69:0a:93:e7:81:b7:82:70:da:4b:d6:22:1e:45: 60:05:e8:e0:37:c0:17:99:56:41:26:2a:03:c0:56:4b:c1:24: 55:9a:25:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI1NTcxMTAvBgNVBAUTKDgzRkZBQUE3RDlBNDc1OTJCMUQ0QzU4M0RGRUJGQUVF QTI3MTYzRUYwHhcNMjQwNDIyMTg0MjM5WhcNMjQwNDI5MTg0MjM5WjAYMRYwFAYD VQQDEw02NjI2YWY5Zi05ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5P8li6E3MdFrRGORMn8HQ6+Z4+Tj9aOxFgc4feevEeJjvzl0Mb/K35YJy+Ay Nb4jzUIdm+VXJgbYnanSQHBfeLcXvohBO5xeM4fDxomQ2L3cc1M1nw2GWgeEFuUl Xs4zVWBEL8n8PyFCkp6Y46m76T6JVrcNgJ+Dr/wYtOJ7uxy+rlEJkzfcWkUDcZEK QB9IuGcE6EFAc4KfOyDAAOJOTWt36PNBpTBT2MunYW8K+gIUhUkL56WU2jWng5nY BqOrnlWosCT8/F8/BUQUpc7KfQT0TWvuY0L7msfcvF2vc9IKAB7QxrE2graO9JMv Dps4pma+m4qIggmuIaDDHLg7TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgNCoxc H2T1n/MrnuHkU8Ej++4mMB8GA1UdIwQYMBaAFIP/qqfZpHWSsdTFg9/r+u6icWPv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjU1Ny9CNjU5RUIxODlF QUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2RaS3gxTVdEMy12NjdxSnhZ LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dfLXFwOW1rZFpLeDFNV0QzLXY2N3FKeFktOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjU1Ny9CNjU5RUIxODlFQUQxMUU5QUJGQzI1N0NDNEY5QUUwMi9nXy1xcDlta2Ra S3gxTVdEMy12NjdxSnhZLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX6sPHNviZMUlQp5gotSOG565uPS3XA+JyKY2Ma1W/71dWsFt4IvQ9 fkESTW526xWwuhv52tRlNp1i8p4jybseL6DjulTPJoDR+OwLVIAeDmsmbqlBXP4f 1CrkGhG565dIqqTvxLMwoNbifnatOsHcIjdhsS8qZD7tbOv6OxFvPFp0umoIVQQC CqoKO1wnuqRnD7grT4nMsyzPv2DZ4j17Io9p+0LEJKIPl+7noBnX2kOh1M3cxedr mtfDABDh8MYN7/EN9+Da2bezd9nEo45KqaOGYMQg1T2olXGXaQqT54G3gnDaS9Yi HkVgBejgN8AXmVZBJioDwFZLwSRVmiUc -----END CERTIFICATE-----Generated at Tue Apr 23 18:42:54 2024 by rpki-client on console-ams.rpki-client.org